Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9fb042c9-e1e4-4206-8d76-3ec78ee211dc/95ca4cbab44c47bd98e6645d337790b5623278f3.mft
File:                     95ca4cbab44c47bd98e6645d337790b5623278f3.mft (raw, json)
Hash identifier:          fwCA0fdMrKr85WBx7sH8mFd3QtrNXMoqAySOboU9548=
Subject key identifier:   D5:CC:85:EA:C1:92:A7:85:C1:B0:9C:7C:CA:C7:14:4B:0B:40:CE:92
Authority key identifier: CD:A7:C3:CD:CD:8F:D6:50:78:FA:DD:57:77:E4:C2:43:E1:0F:8B:34
Certificate issuer:       /CN=95ca4cbab44c47bd98e6645d337790b5623278f3
Certificate serial:       0787C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95ca4cbab44c47bd98e6645d337790b5623278f3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9fb042c9-e1e4-4206-8d76-3ec78ee211dc/95ca4cbab44c47bd98e6645d337790b5623278f3.mft
Manifest number:          03E4
Signing time:             Mon 15 Apr 2024 08:21:35 +0000
Manifest this update:     Mon 15 Apr 2024 07:20:16 +0000
Manifest next update:     Thu 18 Apr 2024 08:50:16 +0000
Files and hashes:         1: 95ca4cbab44c47bd98e6645d337790b5623278f3.crl (hash: h3qmqLWd/Y1OMBA7rQ9MCyMqpV9fHer8w/jEgidjPfs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493511 (0x787c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ca4cbab44c47bd98e6645d337790b5623278f3
        Validity
            Not Before: Apr 15 07:20:16 2024 GMT
            Not After : Apr 18 08:50:16 2024 GMT
        Subject: CN=0a534d0e7a93dea82aaf920056e85bd04bd6373d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7e:69:53:be:3f:ac:55:3e:5f:7d:a7:c5:c5:
                    81:4e:de:b6:b3:4c:53:1a:ae:fb:8e:f4:a3:a0:f6:
                    8d:9c:a6:ac:0e:91:76:e6:8f:1d:f4:1f:0c:1c:68:
                    15:26:6d:92:34:73:3d:3a:04:11:6f:3a:7e:8c:85:
                    43:e5:04:3a:94:2a:6a:f3:22:f8:9a:72:6f:0b:4c:
                    23:a3:3b:f9:2b:c1:03:0d:36:09:8e:a2:04:23:8a:
                    6b:83:3e:3c:bb:2c:d2:87:f3:40:c3:9e:b2:09:11:
                    7e:b6:c1:8b:de:70:96:6f:04:38:05:16:42:4b:27:
                    c8:41:b4:a1:59:49:0e:ea:e2:78:17:94:0d:4f:ba:
                    f5:68:20:cd:51:01:fd:6e:18:32:05:a0:58:7b:2f:
                    b5:e4:6a:a4:cc:48:73:65:03:1b:32:ad:ff:30:ba:
                    16:26:54:55:b1:a1:ed:13:36:44:d4:b5:e3:eb:cd:
                    26:82:cc:bd:96:3a:99:03:cd:68:51:6f:55:c8:04:
                    db:f1:5d:4a:f8:ac:1e:c2:fc:48:8b:3a:8e:85:c0:
                    25:63:7d:41:b2:99:d9:fb:b9:4a:63:af:86:fe:e6:
                    c1:e7:e9:b0:80:c6:82:15:ef:7f:5d:97:ae:61:75:
                    1d:f3:5d:d6:ac:31:49:25:ae:79:90:45:c4:1f:ff:
                    72:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CC:85:EA:C1:92:A7:85:C1:B0:9C:7C:CA:C7:14:4B:0B:40:CE:92
            X509v3 Authority Key Identifier:
                keyid:CD:A7:C3:CD:CD:8F:D6:50:78:FA:DD:57:77:E4:C2:43:E1:0F:8B:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/95ca4cbab44c47bd98e6645d337790b5623278f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9fb042c9-e1e4-4206-8d76-3ec78ee211dc/95ca4cbab44c47bd98e6645d337790b5623278f3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9fb042c9-e1e4-4206-8d76-3ec78ee211dc/95ca4cbab44c47bd98e6645d337790b5623278f3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0d:1b:c8:5a:df:91:58:cc:12:ba:5b:1f:22:b0:12:ed:07:
         ec:19:53:62:15:fb:8f:0e:e0:3c:a7:a9:56:19:f1:7f:17:47:
         b9:a3:9b:3a:6e:71:60:45:6e:63:f4:9c:a7:21:3e:4c:df:63:
         b3:58:54:91:6a:64:28:71:0c:a8:85:53:13:48:37:5b:da:9c:
         57:85:f5:fe:ac:6a:3e:da:40:44:24:46:a9:a7:43:ba:72:39:
         0b:c5:3e:3c:55:77:1c:8d:76:0d:aa:31:d4:60:23:19:95:8a:
         9e:1d:5d:a6:05:af:97:7f:b5:79:53:07:de:1a:a7:39:48:9a:
         1f:ee:14:7f:eb:ba:b6:a3:3a:fd:cf:94:94:b7:c5:1b:67:c9:
         1f:f8:98:9b:84:55:19:5b:f9:a8:42:6f:a1:3a:0b:bc:4c:80:
         5a:90:3e:2b:6e:de:ca:02:26:3c:b3:fa:cf:ce:46:eb:e0:bb:
         a9:69:22:34:d5:ff:d8:a0:0e:a2:02:80:ac:03:c3:88:56:74:
         06:46:c7:86:82:2f:79:94:f0:a3:fa:bc:f8:ac:09:f8:dc:95:
         5c:5c:71:80:58:1d:81:d9:2d:84:a8:01:69:0a:80:83:c6:e1:
         f8:11:6d:eb:77:8b:da:1c:d8:c5:e7:4a:26:aa:5c:89:ee:80:
         6b:e8:e3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----